Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
CmsmadesimpleCms Made Simple2.2.5

5 matches found

CVE
CVE•added 2018/03/13 1:29 a.m.•60 views

CVE-2018-1000094

CMS Made Simple version 2.2.5 contains a Remote Code Execution vulnerability in File Manager that can result in Allows an authenticated admin that has access to the file manager to execute code on the server. This attack appear to be exploitable via File upload -> copy to any extension.

7.2CVSS7.2AI score0.55987EPSS
CVE
CVE•added 2018/01/25 4:29 p.m.•40 views

CVE-2018-5963

CMS Made Simple (CMSMS) 2.2.5 has XSS in admin/addbookmark.php via the title parameter.

4.8CVSS4.9AI score0.00472EPSS
CVE
CVE•added 2018/01/25 4:29 p.m.•39 views

CVE-2018-5965

CMS Made Simple (CMSMS) 2.2.5 has XSS in admin/moduleinterface.php via the m1_errors parameter.

4.8CVSS4.9AI score0.00472EPSS
CVE
CVE•added 2018/01/25 4:29 p.m.•34 views

CVE-2018-5964

CMS Made Simple (CMSMS) 2.2.5 has XSS in admin/moduleinterface.php via the m1_messages parameter.

4.8CVSS4.9AI score0.00279EPSS
CVE
CVE•added 2018/03/13 3:29 p.m.•31 views

CVE-2018-1000092

CMS Made Simple version versions 2.2.5 contains a Cross ite Request Forgery (CSRF) vulnerability in Admin profile page that can result in Details can be found here http://dev.cmsmadesimple.org/bug/view/11715. This attack appear to be exploitable via A specially crafted web page. This vulnerability ...

8.8CVSS8.8AI score0.00145EPSS